Rustup: Preload HSTS for rustup.rs

Created on 9 Sep 2019  路  5Comments  路  Source: rust-lang/rustup

HSTS is not enabled for first-time visitors: https://hstspreload.org/?domain=rustup.rs

_Originally posted by @Darkspirit in https://github.com/rust-lang/rustup.rs/issues/180#issuecomment-529508786_

Most helpful comment

What more do we need to solve this? Is it worth it if we're considering migrating the website to rust-lang.org ?

All 5 comments

What more do we need to solve this? Is it worth it if we're considering migrating the website to rust-lang.org ?

@pietroalbini how're we feeling about rustup.rs vs install.rust-lang.org or get.rust-lang.org or similar?

Is there some reason to change?

The .rs suffix has (or had) problematic management IIRC.

We can do that separately to hsts pining and or certificate inclusion though...

Was this page helpful?
0 / 5 - 0 ratings

Related issues

jjl picture jjl  路  3Comments

davidawad picture davidawad  路  3Comments

jimmycuadra picture jimmycuadra  路  4Comments

fenhl picture fenhl  路  4Comments

durka picture durka  路  3Comments